Unrated
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the...
CVE-2026-94361
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| CVE | Payable Payment Gateway for WooCommerce |
< 1.3.1 |
1.3.1 |
Original description The description as published by the source.
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notification before marking a WooCommerce order paid or failed, allowing unauthenticated attackers to change the payment status of any order in the store regardless of the payment method it was placed with.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web contact@wpscan.com
- web nvd.nist.gov
- web wpscan.com
- web github.com